Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/544ed5e4-5b59-3cc8-9d09-28d3d4aa9d91.roa
File:                     544ed5e4-5b59-3cc8-9d09-28d3d4aa9d91.roa (raw, json)
Hash identifier:          6Ae9v2BtacFpP4jXj9aUOMWBu1/2W0q+V4ZI61iL21c=
Subject key identifier:   D4:D5:E0:4C:B5:B3:B6:D8:C4:93:FA:70:6D:E8:1E:79:9E:47:ED:B9
Certificate issuer:       /CN=9f983207-8073-42af-88ee-df4902c8adaf
Certificate serial:       010D0C9F432858437EE18D9C9ACEF15889C78BC0
Authority key identifier: C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/544ed5e4-5b59-3cc8-9d09-28d3d4aa9d91.roa
Signing time:             Mon 09 Oct 2023 18:58:31 +0000
ROA not before:           Mon 09 Oct 2023 18:58:31 +0000
ROA not after:            Sun 07 Jan 2024 19:58:31 +0000
asID:                     200
IP address blocks:        2602:fa2e:a97:402::/63 maxlen: 63

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:43:7e:e1:8d:9c:9a:ce:f1:58:89:c7:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f983207-8073-42af-88ee-df4902c8adaf
        Validity
            Not Before: Oct  9 18:58:31 2023 GMT
            Not After : Jan  7 19:58:31 2024 GMT
        Subject: CN=fd6a0538-722d-4d58-af08-079265b7ce4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f2:0e:74:cb:73:1c:48:a3:42:46:78:56:d9:
                    4c:3d:b5:dd:e0:68:95:3b:a9:c7:f9:d3:e9:99:7e:
                    06:42:ff:91:21:03:41:98:e4:27:8b:de:03:f1:3b:
                    62:76:30:78:79:58:6a:51:e6:36:80:e4:1b:f5:93:
                    04:82:d5:a5:3b:e0:cd:62:aa:e8:3e:e7:5a:e2:7e:
                    b3:38:fb:15:4f:ad:87:4a:9a:e8:2d:34:32:15:44:
                    97:9c:83:d6:87:6f:2a:97:3a:f2:6a:e9:c7:25:bd:
                    a0:1f:87:36:8c:07:c1:07:fb:8d:fd:81:13:e0:ef:
                    db:4a:e7:92:98:5b:55:c1:23:26:fe:44:9d:98:48:
                    7d:a4:39:d9:8a:1a:6d:a8:aa:11:9f:f8:ba:5b:9f:
                    a0:3d:0c:b5:4c:a3:95:4a:e0:1e:98:6e:16:7f:a0:
                    37:4a:b9:d8:39:83:e4:72:2b:2c:4f:f3:4f:4d:d9:
                    03:b4:2b:a0:7c:b2:ca:53:07:53:82:bb:bb:d0:42:
                    a3:dd:40:4a:ef:31:d1:21:ae:5a:6c:39:75:96:5a:
                    bd:1a:ec:be:39:ed:f9:92:78:02:b1:a6:86:0c:18:
                    61:32:e1:35:98:d5:1a:02:fb:a3:70:36:d4:6b:d3:
                    16:4d:24:f5:ba:76:97:a2:0e:a5:9d:26:1e:cb:7c:
                    6b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:D5:E0:4C:B5:B3:B6:D8:C4:93:FA:70:6D:E8:1E:79:9E:47:ED:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/544ed5e4-5b59-3cc8-9d09-28d3d4aa9d91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf/9f983207-8073-42af-88ee-df4902c8adaf.crl

            X509v3 Authority Key Identifier:
                keyid:C3:2C:B9:FB:7A:22:7F:4A:05:1E:4A:99:A8:FB:6E:8D:68:59:CA:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9f983207-8073-42af-88ee-df4902c8adaf.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:fa2e:a97:402::/63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:dc:e5:3a:cf:d6:7d:1a:f4:7a:91:1b:7c:70:25:83:86:78:
         1b:7e:a8:f5:af:b3:28:01:e9:a8:1b:83:65:4c:6c:3d:65:33:
         91:82:1b:61:8d:54:47:97:8c:75:a6:04:a8:0f:76:d6:61:02:
         36:0a:ac:66:f3:1b:71:ca:2b:3b:d6:c8:cf:09:65:83:21:b1:
         7b:cd:2c:d5:62:94:97:9f:ab:01:72:48:7a:a2:ab:de:67:ce:
         cf:4d:e7:db:13:c1:18:0c:c8:21:92:1a:24:f9:82:1f:81:45:
         80:fd:a1:b9:e6:ef:6f:5a:f3:6c:e6:e0:70:de:71:47:ac:cb:
         ed:a4:f4:73:15:c4:7d:7e:0e:93:b5:7a:38:41:de:14:d7:c1:
         07:f3:93:f4:98:53:bf:c0:f9:54:e8:0d:84:64:12:e1:05:be:
         04:bf:64:9d:97:d4:24:ad:c6:bd:2f:b8:28:8f:50:40:08:16:
         88:7b:7e:de:2a:8d:e9:25:44:61:51:0e:b0:5d:a6:b5:8c:91:
         5c:3c:b7:69:08:01:15:28:b5:30:77:99:e1:0e:ec:9e:ed:18:
         a1:3d:fc:cc:fa:c7:7a:e7:36:b5:22:44:bf:d6:f3:53:f2:51:
         be:c9:03:b7:6c:64:f4:6c:8c:4c:f9:57:a2:73:ce:7b:9e:2a:
         78:c6:75:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----